Privacy Policy Newsletter & Press Release

Information on data protection pursuant to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
We take data protection extremely seriously, particularly where the personal information of our newsletter subscribers and press release recipients is concerned (“data”). We are writing to inform you about how we process your data and which claims and rights you are entitled to.

1. Data controller
The controller is:

Lena Hoschek GmbH
Längenfeldgasse 27/7a
1120 Vienna

e-mail: office@lenahoschek.com

2. Categories of data relevant to newsletter marketing and press releases:
– e-mail address as contact details for the delivery of the newsletter.
– e-mail address as contact details for the delivery of press releases.

4.  Legal basis
The newsletter is distributed in accordance with the foregoing clauses 3 a) and c) based on your consent pursuant to Art. 6(1) lit. f GDPR.

The additional processing in clause 3 b) is carried out based on overriding interests of Lena Hoschek GmbH. We evaluate the efficiency and attractiveness of our newsletter from a technical perspective, in order in future only to send you those product recommendations that are of interest to you. Since no sensitive personal information is used to this end and, as a rule, evaluations are carried out solely on an aggregated, not on a personal level, the data processing constitutes a legitimate interest.

4.  Legal basis
The newsletter is distributed in accordance with the foregoing clauses 3 a) and c) based on your consent pursuant to Art. 6(1) lit. f GDPR.

The additional processing in clause 3 b) is carried out based on overriding interests of Lena Hoschek GmbH. We evaluate the efficiency and attractiveness of our newsletter from a technical perspective, in order in future only to send you those product recommendations that are of interest to you. Since no sensitive personal information is used to this end and, as a rule, evaluations are carried out solely on an aggregated, not on a personal level, the data processing constitutes a legitimate interest.

5.  Recipients or categories of recipients of your data
– Lena Hoschek GmbH has access to your data only insofar as this is necessary for the attainment of purposes in accordance with the internal allocation of tasks. Within the company, only those departments and employees as require such access will be granted access to your data.

– Service providers: we engage service providers who have access to your data as order processors and process this information for specific purposes as stipulated by us. These are processes can providers of marketing service, website hosting services, IT support services or website analysis services.

– Other third parties: under certain circumstances, we share your data with authorities, external advisers, business partners or courts, where necessary.

– International data transfer: while all recipients are based within the EU/EEA, you can expect that in future, recipients may be located in a country outside the EU/EEA which does not provide a level of data comparable to that in Europe. In particular, service providers may in future be located in the USA. In this case, Lena Hoschek GmbH will either select service providers certified under the US-EU Privacy Shield Program (Art. 45(1) GDPR) or which have agreed with Lena Hoschek GmbH the EU standard data protection clauses adopted by the EU Commission (Art. 46 (2) (c) or (d) GDPR).

We will not otherwise share your data with third parties unless we notify you separately. If we commission service providers in the course of order processing, your data will there be subject to the safety standards stipulated by us, in order to ensure appropriate protection of your data.

6.  Duration of data storage
We will process and store your data until such time as you withdraw consent.

7.  Processing of your data in a third country or by an international organisation
Your personal data is not processed in a third country or by any international organisation. Should such processing be intended in future, you will be notified accordingly.

8.  Your rights
Under certain circumstances, you can assert the following data protection rights:
– You have the right to obtain information on which data we store and process, and to have that information corrected or deleted in accordance with Art. 15, 16, 17 GDPR; Data can be deleted provided no other statutory provisions (e.g. statutory storage requirements) or overriding legitimate interests on our part (e.g. in defence of our rights and claims) do not preclude such deletion;
– Right to restriction of data processing pursuant to Art. 18 GDPR,
– Right to object pursuant to Art. 21 GDPR,
– Right to data portability pursuant to Art. 20 GDPR.

Furthermore, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). However, we recommend that you bring your complaint to us first to allow us to resolve your issue more quickly.

Wherever possible, your requests to exercise your rights should be submitted, in writing, to the address stated above.

9. Scope of your obligation to provide your data
You are not under any legal obligation to provide your data to Lena Hoschek GmbH. However, if you do not provide your e-mail address and consent, we will be unable to send you our newsletter. The provision of your data is entirely voluntary. You will not suffer any legal disadvantage as a result of not submitting your data.

10. Automated individual decision-making (including profiling)
We do not use any automated decision-making procedures pursuant to Art. 22 GDPR. As required by law, we will notify you separately if we intend in future to use such procedures in individual cases.

11. Version
This data protection information was last updated on 01 Dec. 2023. Lena Hoschek reserves the right to update this data protection information from time to time.

Information on your right to object pursuant to Art. 21 GDPR
You have the right at any time to object to the processing of your personal information on the basis of Art. 6 (1) f GDPR (data processing based legitimate interests) or Art. 6 (1) e GDPR (data processing in the public interest). However, in order to be able to lodge an objection, there must be grounds for your objection relating to your particular situation. This also applies for profiling based on this provision as defined in Art. 4 No. 4 GDPR.